The vulnerability of AMD Secure Processor’s microprogramming software allows a hacker to trigger a service failure.

The vulnerability of AMD Secure Processor ASP microprogramming software relates to the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

hw: amd: Cross-Process Information Leak

A flaw was found in hw, in “Zen 2” CPUs. This issue may allow an attacker to access sensitive information under specific microarchitectural circumstances...

HPESBHF04540 rev.1 - Certain HPE Cray Servers and HPE ProLiant DL/XL Servers Using AMD EPYC Processors, AMD-SB-4007, DXE Driver Memory Leaks, Local Disclosure of Sensitive Information

Potential Security Impact: Local: Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX235n Server - Prior to BIOS 1.3.0 HFP 23.4 HPE Cray EX425 Compute Blade - Prior to BIOS 1.7.2 HFP 23.9 HPE ProLiant DL325 Gen10 Plus server - Prior to...

amd: Return Address Predictor vulnerability leading to information disclosure

A side channel vulnerability was found in hw amd. Some AMD CPUs may allow an attacker to influence the return address prediction. This issue may result in speculative execution at an attacker-controlled instruction pointer register, potentially leading to information disclosure...

kernel: AMD: Cross-Thread Return Address Predictions

A flaw was found in HW. When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch, potentially resulting in information disclosure...

AMD CPU Instruction Malpractice Vulnerability

AMD CPUs are a family of CPUs from AMD. The AMD CPUs suffer from an improper instruction vulnerability that stems from the fact that incorrect or unexpected behavior of the INVD instruction would allow an attacker with a malicious hypervisor to affect the cache line write-back behavior of the CPU...

hw: amd: Cross-Process Information Leak

A flaw was found in hw, in “Zen 2” CPUs. This issue may allow an attacker to access sensitive information under specific microarchitectural circumstances...

DEBIAN-CVE-2023-20592

Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine VM memory integrity...

CVE-2022-23820

Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution...

UBUNTU-CVE-2023-20592

Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine VM memory integrity...

amd: Return Address Predictor vulnerability leading to information disclosure

A side channel vulnerability was found in hw amd. Some AMD CPUs may allow an attacker to influence the return address prediction. This issue may result in speculative execution at an attacker-controlled instruction pointer register, potentially leading to information disclosure...

kernel: drm/amd/display: fix mapping to non-allocated address

An out-of-bounds array access was found in the AMD display driver in the Linux kernel. The driver allocates GPIO registers using incorrect bounds, leading to access of non-allocated memory addresses. This could cause kernel memory corruption or crashes during display initialization...

kernel: dmaengine: ptdma: check for null desc before calling pt_cmd_callback

AMD PTDMA Pass-Through DMA engine crashes the kernel when ptissuepending encounters empty descriptor queues. The function blindly invokes ptcmdcallback without verifying that a valid descriptor exists, triggering a NULL pointer dereference. This commonly surfaces during system shutdown on AMD...

AMD EPYC Buffer Error Vulnerability

AMD EPYC is a line of x86 architecture server microprocessors from AMD, known in Chinese as Xiaolong, which utilizes the Zen microarchitecture. The AMD EPYC suffers from a security vulnerability that originates from the inability to validate the value in the APCB, a privileged attacker may be abl...

AMD EPYC Security Vulnerability

AMD EPYC is a line of x86 architecture server microprocessors from AMD, known in Chinese as "霄龙", which utilizes the Zen microarchitecture. A security vulnerability exists in AMD EPYC, which stems from the fact that improperly clearing sensitive data from the ASP boot loader could expose keys to ...

AMD EPYC Input Validation Error Vulnerability

AMD EPYC is a line of x86 architecture server microprocessors from AMD, known in Chinese as "霄龙", which utilizes the Zen microarchitecture. The AMD EPYC suffers from a security vulnerability that originates from an inability to validate the AMD SMM communication buffer, which could allow an...

AMD EPYC Security Vulnerability

AMD EPYC is an x86 architecture server microprocessor product line from AMD, known as "Xiao Long" in Chinese, utilizing the Zen microarchitecture. A security vulnerability exists in AMD EPYC, which stems from a possible change in the SMM configuration when SNP is enabled, resulting in a loss of...

AMD CPU Security Vulnerability

AMD CPUs are a family of CPUs from Ultraviolet Semiconductor AMD. The AMD CPUs suffer from a security vulnerability that stems from insufficient protection in the System Management Mode SMM code could allow an attacker to achieve privilege escalation via local access...

AMD EPYC Security Vulnerability

AMD EPYC is a line of x86 architecture server microprocessors from AMD, known in Chinese as "Xiao Long", utilizing the Zen microarchitecture. A security vulnerability in AMD EPYC, which stems from incorrect address validation in SNP-enabled ASPs, could allow an attacker to compromise client memor...

AMD CPU Competitive Conditions Issue Vulnerability

AMD CPUs are a family of CPUs from Ultraviolet Semiconductor AMD. The AMD CPUs suffer from a security vulnerability that stems from a race condition in the System Management Mode SMM code that could allow an attacker to use compromised user space for exploitation, which could lead to escalation o...